| context | Package context defines the Context type, which carries deadlines, cancellation signals, and other request-scoped values across API boundaries and between processes. |
| errors | Package errors implements functions to manipulate errors. |
| fmt | Package fmt implements formatted I/O with functions analogous to C's printf and scanf. |
| github.com/spf13/pflag | Package pflag is a drop-in replacement for Go's flag package, implementing POSIX/GNU-style --flags. |
| k8s.io/apimachinery/pkg/apis/meta/v1 | Package v1 contains API types that are common to all versions. |
| k8s.io/apimachinery/pkg/runtime | Package runtime defines conversions between generic types and structs to map query strings to struct objects. |
| k8s.io/apimachinery/pkg/runtime/serializer | |
| k8s.io/apimachinery/pkg/util/net | |
| k8s.io/apimachinery/pkg/util/sets | Package sets has generic set and specified sets. |
| k8s.io/apimachinery/pkg/util/validation/field | |
| k8s.io/apimachinery/pkg/util/wait | Package wait provides tools for polling or listening for changes to a condition. |
| k8s.io/apiserver/pkg/admission | |
| k8s.io/apiserver/pkg/admission/plugin/namespace/lifecycle | |
| k8s.io/apiserver/pkg/admission/plugin/policy/mutating | |
| k8s.io/apiserver/pkg/admission/plugin/policy/validating | |
| k8s.io/apiserver/pkg/admission/plugin/resourcequota | Package resourcequota enforces all incoming requests against any applied quota in the namespace context of the request |
| k8s.io/apiserver/pkg/admission/plugin/webhook/mutating | Package mutating delegates admission checks to dynamically configured mutating webhooks. |
| k8s.io/apiserver/pkg/admission/plugin/webhook/validating | Package validating makes calls to validating (i.e., non-mutating) webhooks during the admission process. |
| k8s.io/apiserver/pkg/apis/apiserver | Package apiserver is the internal version of the API. |
| k8s.io/apiserver/pkg/apis/apiserver/install | |
| k8s.io/apiserver/pkg/apis/apiserver/validation | Package validation validates EncryptionConfiguration. |
| k8s.io/apiserver/pkg/authentication/authenticator | |
| k8s.io/apiserver/pkg/authentication/cel | Package cel contains the CEL related interfaces and structs for authentication. |
| k8s.io/apiserver/pkg/authorization/cel | |
| k8s.io/apiserver/pkg/features | |
| k8s.io/apiserver/pkg/server | Package server contains the plumbing to create kubernetes-like API server command. |
| k8s.io/apiserver/pkg/server/egressselector | |
| k8s.io/apiserver/pkg/server/options | package options is the public flags and options used by a generic api server. |
| k8s.io/apiserver/pkg/server/options/authenticationconfig/metrics | |
| k8s.io/apiserver/pkg/util/feature | |
| k8s.io/apiserver/plugin/pkg/authenticator/token/oidc | oidc implements the authenticator.Token interface using the OpenID Connect protocol. |
| k8s.io/client-go/dynamic | |
| k8s.io/client-go/informers | Package informers provides generated informers for Kubernetes APIs. |
| k8s.io/client-go/kubernetes | Package kubernetes holds packages which implement a clientset for Kubernetes APIs. |
| k8s.io/client-go/listers/core/v1 | |
| k8s.io/client-go/util/keyutil | Package keyutil contains utilities for managing public/private key pairs. |
| k8s.io/component-base/cli/flag | |
| k8s.io/component-base/featuregate | |
| k8s.io/klog/v2 | Package klog contains the following functionality: |
| k8s.io/kube-openapi/pkg/common | package common holds shared code and types between open API code generator and spec generator. |
| k8s.io/kubernetes/pkg/controller/serviceaccount | Package serviceaccount provides implementations to manage service accounts and service account tokens |
| k8s.io/kubernetes/pkg/features | |
| k8s.io/kubernetes/pkg/kubeapiserver/authenticator | |
| k8s.io/kubernetes/pkg/kubeapiserver/authorizer | |
| k8s.io/kubernetes/pkg/kubeapiserver/authorizer/modes | |
| k8s.io/kubernetes/pkg/serviceaccount | |
| k8s.io/kubernetes/pkg/util/filesystem | |
| k8s.io/kubernetes/plugin/pkg/admission/admit | |
| k8s.io/kubernetes/plugin/pkg/admission/alwayspullimages | Package alwayspullimages contains an admission controller that modifies every new Pod to force the image pull policy to Always. |
| k8s.io/kubernetes/plugin/pkg/admission/antiaffinity | Package antiaffinity provides the LimitPodHardAntiAffinityTopology admission controller. |
| k8s.io/kubernetes/plugin/pkg/admission/certificates/approval | |
| k8s.io/kubernetes/plugin/pkg/admission/certificates/ctbattest | |
| k8s.io/kubernetes/plugin/pkg/admission/certificates/signing | |
| k8s.io/kubernetes/plugin/pkg/admission/certificates/subjectrestriction | |
| k8s.io/kubernetes/plugin/pkg/admission/defaulttolerationseconds | |
| k8s.io/kubernetes/plugin/pkg/admission/deny | |
| k8s.io/kubernetes/plugin/pkg/admission/eventratelimit | Package eventratelimit contains an admission controller that enforces a rate limit on events |
| k8s.io/kubernetes/plugin/pkg/admission/extendedresourcetoleration | |
| k8s.io/kubernetes/plugin/pkg/admission/gc | |
| k8s.io/kubernetes/plugin/pkg/admission/imagepolicy | Package imagepolicy contains an admission controller that configures a webhook to which policy decisions are delegated. |
| k8s.io/kubernetes/plugin/pkg/admission/limitranger | |
| k8s.io/kubernetes/plugin/pkg/admission/namespace/autoprovision | |
| k8s.io/kubernetes/plugin/pkg/admission/namespace/exists | |
| k8s.io/kubernetes/plugin/pkg/admission/network/defaultingressclass | |
| k8s.io/kubernetes/plugin/pkg/admission/network/denyserviceexternalips | |
| k8s.io/kubernetes/plugin/pkg/admission/noderestriction | |
| k8s.io/kubernetes/plugin/pkg/admission/nodetaint | |
| k8s.io/kubernetes/plugin/pkg/admission/podnodeselector | |
| k8s.io/kubernetes/plugin/pkg/admission/podtolerationrestriction | Package podtolerationrestriction is a plugin that first verifies any conflict between a pod's tolerations and its namespace's tolerations, and rejects the pod if there's a conflict. |
| k8s.io/kubernetes/plugin/pkg/admission/podtopologylabels | Package podtopologylabels is a plugin that mutates `pod/binding` requests by copying the `topology.k8s.io/{zone,region}` labels from the assigned Node object (in the Binding being admitted) onto the Binding so that it can be persisted onto the Pod object when the Pod is being scheduled. |
| k8s.io/kubernetes/plugin/pkg/admission/priority | |
| k8s.io/kubernetes/plugin/pkg/admission/runtimeclass | Package runtimeclass contains an admission controller for modifying and validating new Pods to take RuntimeClass into account. |
| k8s.io/kubernetes/plugin/pkg/admission/security/podsecurity | |
| k8s.io/kubernetes/plugin/pkg/admission/serviceaccount | Package serviceaccount enforces all pods having an associated serviceaccount, and all containers mounting the API token for that serviceaccount at a known location |
| k8s.io/kubernetes/plugin/pkg/admission/storage/persistentvolume/resize | |
| k8s.io/kubernetes/plugin/pkg/admission/storage/storageclass/setdefault | |
| k8s.io/kubernetes/plugin/pkg/admission/storage/storageobjectinuseprotection | |
| k8s.io/kubernetes/plugin/pkg/auth/authenticator/token/bootstrap | Package bootstrap provides a token authenticator for TLS bootstrap secrets. |
| k8s.io/utils/net | |
| k8s.io/utils/pointer | Deprecated: Use functions in k8s.io/utils/ptr instead: ptr.To to obtain a pointer, ptr.Deref to dereference a pointer, ptr.Equal to compare dereferenced pointers. |
| net | Package net provides a portable interface for network I/O, including TCP/IP, UDP, domain name resolution, and Unix domain sockets. |
| net/url | Package url parses URLs and implements query escaping. |
| os | Package os provides a platform-independent interface to operating system functionality. |
| reflect | Package reflect implements run-time reflection, allowing a program to manipulate objects with arbitrary types. |
| strings | Package strings implements simple functions to manipulate UTF-8 encoded strings. |
| sync | Package sync provides basic synchronization primitives such as mutual exclusion locks. |
| time | Package time provides functionality for measuring and displaying time. |